Overview

overview

10

Static

static

10

3906e86b3d...ece6b4

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3906e86b3d3cd108cbf0468c22ece6b4

  • Size

    140KB

  • Sample

    220818-x7s5zsagfp

  • MD5

    3906e86b3d3cd108cbf0468c22ece6b4

  • SHA1

    99e7dc85f8ef2903141add2db03d0155d5ab5e7f

  • SHA256

    ac09345ea9d162a8299f848d99cad3bb84fca444c24799efceaabbc7fd1a9c85

  • SHA512

    70a8c5a47d51afe12f3c4b2bafadfa586fa95f68794a39c0630dfd7af28905263e60434a271c155faa03c4dcfe0758e0b6777c4f5e9b33ec2f24db427a90696d

  • SSDEEP

    3072:ezwFzskMXc8TfskyCBkIOVPem4MSRvWi4DA6Dcoixgr1TkM3Q:eGMXxJyCbOIdZ+Dcoixgr1TkM3Q

Score
10/10
gafgytmiraidiscoverylinux

Malware Config

Targets

    • Target

      3906e86b3d3cd108cbf0468c22ece6b4

    • Size

      140KB

    • MD5

      3906e86b3d3cd108cbf0468c22ece6b4

    • SHA1

      99e7dc85f8ef2903141add2db03d0155d5ab5e7f

    • SHA256

      ac09345ea9d162a8299f848d99cad3bb84fca444c24799efceaabbc7fd1a9c85

    • SHA512

      70a8c5a47d51afe12f3c4b2bafadfa586fa95f68794a39c0630dfd7af28905263e60434a271c155faa03c4dcfe0758e0b6777c4f5e9b33ec2f24db427a90696d

    • SSDEEP

      3072:ezwFzskMXc8TfskyCBkIOVPem4MSRvWi4DA6Dcoixgr1TkM3Q:eGMXxJyCbOIdZ+Dcoixgr1TkM3Q

    Score
    9/10
    discovery

    • Contacts a large (69092) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks